CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-02-16
Node.js systeminformation Command Injection Vulnerability (CVE-2021-21315)
[Affected Scope] Applications running Node.js environments utilizing the 'systeminformation' npm package versions prior to 5.3.1
[Impact] Remote attackers can inject and execute arbitrary system commands via parameter manipulation, potentially leading to full host compromise
[Mitigation] Immediately upgrade the 'systeminformation' package to version 5.3.1 or higher